added https to production serverURL
replacing IS_AUTHENTICATED_FULLY with SpEL isAuthenticated()